Related Threat Clusters

Chaos Ransomware Deploys msaRAT to Evade Detection via Browsers
The Chaos ransomware group has introduced a new Rust-based remote access trojan (RAT) named msaRAT, which disguises command-and-control (C2) traffic through legitimate web browsers like Chrome and Microsoft Edge. By…

8 articles · Updated July 23, 2026

Recent Intelligence Reports

Chaos ransomware deploys browser — Securityaffairs.Co · July 23, 2026
Chaos Ransomware Turns Your Chrome and Edge Web Browser Into an Invisible Malware Command Channel — Cybersecuritynews · July 23, 2026
Chaos ransomware uses browser — Feeds.4Sysops · July 23, 2026
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge — Thehackernews · July 23, 2026
Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process — Feeds2.Feedburner · July 23, 2026
Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel — Blog.Talosintelligence · July 23, 2026